[13708] in bugtraq

home help back first fref pref prev next nref lref last post

Re: Bypass Virus Checking

daemon@ATHENA.MIT.EDU (Max Vision)
Sat Feb 5 01:56:47 2000

Mime-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Message-Id:  <Enip.BSO.23.0002041349210.27799-100000@www.whitehats.com>
Date:         Fri, 4 Feb 2000 13:59:50 -0800
Reply-To: Max Vision <vision@WHITEHATS.COM>
From: Max Vision <vision@WHITEHATS.COM>
X-To:         BUGTRAQ@SECURITYFOCUS.COM
To: BUGTRAQ@SECURITYFOCUS.COM

FYI,

I have since discovered that Symantec has removed *all* default exclusions
in their Norton AntiVirus 7.0 (corporate edition).  Gone are the RECYCLED
folder, the windows executables, and the wildcard exclusions.  Nice
default.  It looks like they have addressed this bug.

 Program Version: 7.0
 Scan Engine: 1.1.1.11
 Definitions: 20131a
 Dare: 1/31/2000

Max

I wrote:
> I can confirm that this default exclusion beavhior is present in Norton
> Anti-Virus 2000 (2000.00.02, definitions date 1/24/2000)
>
> Here is a fix that will cause NAV to stop excluding "\Recycled\*.*" as
> it does by default:

home help back first fref pref prev next nref lref last post